Error: rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
File:                     gVdGXshx9nfFuXh07KV5IzijWSQ.mft (raw, json)
Hash identifier:          uvBgUu1iY99EEomqzVUYHWStfGW4pjqcoF+0Dy3KfoM=
Subject key identifier:   71:BF:F2:75:97:C6:3F:A9:15:4E:D1:31:7B:E1:D6:A7:B4:64:AD:18
Authority key identifier: 81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
Certificate issuer:       /CN=F3645EEFAF/serialNumber=8157465EC871F677C5B97874ECA5792338A35924
Certificate serial:       45
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
Manifest number:          41
Signing time:             Wed 04 Nov 2026 05:53:14 +0000
Manifest this update:     Wed 04 Nov 2026 05:53:13 +0000
Manifest next update:     Fri 06 Nov 2026 05:53:13 +0000
Files and hashes:         1: gVdGXshx9nfFuXh07KV5IzijWSQ.crl (hash: ydmQ52kcxeb4jtC/Xz305oEnholbPJUKSDocms27E7I=)
                          2: BCA47662AC3A11F1BD37C8CFCE1D38B0.roa (hash: 1aHOqjAbG/Vyek5fSEwl25glNibnEDDQivHJEhgfU/o=)
                          3: EBEE85F2AC3A11F1A5732FD0CE1D38B0.roa (hash: QwlK+QN112m44lVk1uPEgi3OJcDWCvd/zy8bamKKzqY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 05:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645EEFAF, serialNumber=8157465EC871F677C5B97874ECA5792338A35924
        Validity
            Not Before: Nov  4 05:53:13 2026 GMT
            Not After : Nov  6 05:53:13 2026 GMT
        Subject: CN=6aeac84a-2fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:ba:18:21:80:f6:d5:0a:b6:d4:ee:92:43:
                    fe:a7:ae:be:c5:d6:79:1c:7c:25:57:12:a0:f5:3c:
                    e4:87:40:ff:09:28:69:01:a4:7d:4b:4c:79:06:ad:
                    aa:e1:97:71:b7:a8:08:76:01:6e:9e:dc:17:8e:bf:
                    25:6e:d4:1b:3f:37:1f:12:55:91:77:5a:74:bd:46:
                    ee:35:e0:6d:61:18:e7:18:28:ae:10:1f:f6:42:3f:
                    18:3c:9c:7c:a9:c1:a3:c6:46:c2:31:e3:20:20:10:
                    5b:50:9d:68:57:ed:c6:2f:4a:4c:04:26:41:0f:31:
                    61:e8:60:4e:d1:fb:74:8d:86:d1:dc:87:17:f4:a4:
                    8b:be:98:4d:2a:13:6f:87:e2:99:1d:8f:77:28:ad:
                    52:54:fd:3b:42:da:0d:ce:f6:49:c1:d4:03:4c:27:
                    c4:00:e0:ac:01:60:9f:19:d5:44:0e:2e:d8:3c:d9:
                    2c:86:37:c2:d3:85:f1:15:0b:36:7d:e3:93:77:a9:
                    e2:12:40:0f:6e:d1:e8:d2:00:79:0e:57:2a:f7:35:
                    97:29:cc:c3:17:42:13:9b:76:ab:8a:9d:51:9a:2f:
                    8e:dd:28:d5:ff:35:9a:33:52:0c:15:b2:da:ac:4c:
                    75:74:14:47:5d:d2:af:8d:f5:e3:be:f0:bd:95:5f:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BF:F2:75:97:C6:3F:A9:15:4E:D1:31:7B:E1:D6:A7:B4:64:AD:18
            X509v3 Authority Key Identifier:
                keyid:81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ef:b9:2e:34:98:c6:2d:37:30:cc:bf:3f:f7:99:7a:3e:27:
         2a:2b:85:e2:ef:04:fe:c4:e5:69:72:26:c8:1a:9b:ce:b0:88:
         60:5c:2d:3f:db:f1:e9:4e:57:67:0e:c4:2a:81:9b:78:29:4e:
         a9:1d:de:3e:2b:2a:8c:07:91:10:f1:90:c6:be:48:66:f4:27:
         8a:6b:dd:90:a2:ac:13:d1:56:79:fc:5b:d2:16:f1:35:3a:fa:
         8a:3b:e1:53:62:3d:59:26:a7:ae:c5:e8:68:da:ac:84:f8:d8:
         92:f9:e5:60:25:43:84:92:16:c9:8d:48:c3:72:58:ad:df:93:
         0b:32:fa:0f:b0:05:23:af:e9:3f:00:f8:d0:e2:9f:1f:c2:d6:
         9a:4a:73:20:73:53:af:68:a1:c5:b3:c1:ac:8d:4c:3e:f9:c0:
         81:e9:3f:34:e9:c4:fb:e8:4e:bb:37:44:ea:f7:7a:55:66:b1:
         b7:65:89:11:a9:38:7b:c6:c6:f8:15:03:d4:76:e8:90:02:fb:
         15:5a:f1:e3:32:c9:45:51:08:31:c8:7d:cf:2a:1c:47:99:8a:
         5d:98:4b:62:b8:9c:fc:05:4f:0e:40:40:a7:85:99:31:d7:c2:
         88:32:71:c3:20:1b:ba:0a:32:f1:fe:67:51:23:b3:14:0a:a7:
         1a:50:e5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:19:20 2026 by rpki-client